Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEDEE9229A911F195BA79BDDAE4EC9C.roa
File: ACEDEE9229A911F195BA79BDDAE4EC9C.roa (raw, json)
Hash identifier: FIrSWHirAl9ZM1MfzLV/VJ2EcB5Kpmd8lTC3oQkL0nY=
Subject key identifier: 03:29:0A:83:53:BA:08:0A:47:CA:1C:74:A0:DE:29:0D:69:FC:A9:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A799
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEDEE9229A911F195BA79BDDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 06:53:36 +0000
ROA not before: Fri 27 Mar 2026 06:53:30 +0000
ROA not after: Sun 10 May 2026 06:53:30 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
45.192.115.0/24 maxlen: 24
45.192.165.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/22 maxlen: 24
45.192.228.0/24 maxlen: 24
45.192.229.0/24 maxlen: 24
45.192.230.0/24 maxlen: 24
45.192.231.0/24 maxlen: 24
45.192.232.0/22 maxlen: 24
45.192.236.0/22 maxlen: 24
45.192.239.0/24 maxlen: 24
45.192.244.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.198.183.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108441 (0x1a799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 27 06:53:30 2026 GMT
Not After : May 10 06:53:30 2026 GMT
Subject: CN=69c62970-0ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:0e:64:c8:2f:07:d6:3d:9f:1e:60:48:27:
d4:b4:56:68:f6:49:f6:70:52:5b:7b:31:e2:e4:5e:
56:dc:14:44:9e:2c:d6:53:09:6f:a7:cc:4b:86:ac:
11:00:28:9c:0c:82:d5:0d:29:23:f0:af:d8:af:37:
e0:3e:4e:bb:a5:28:a5:bc:73:7a:79:f2:f7:46:cd:
cd:f5:c7:19:ae:a9:94:10:2a:ad:28:22:62:17:13:
d9:13:19:87:7b:27:ec:9d:73:6f:eb:34:8d:86:ac:
4c:ca:1c:4c:03:da:85:2c:d6:cc:37:a1:a6:ee:da:
92:5b:c9:6e:f8:73:0a:03:9f:f7:2b:31:48:0b:7c:
9d:0f:1c:e8:1b:95:96:cc:69:29:ab:d3:54:5b:a8:
17:07:0a:4a:c4:98:9e:4b:49:dc:76:67:ed:f9:df:
0b:22:9d:bf:dd:dc:ae:8f:e5:00:5d:8c:4d:53:5e:
84:e0:0a:41:da:ec:0a:4a:3d:4f:ac:c3:5e:08:ee:
1d:1d:a2:1e:82:8f:2c:27:73:17:99:f6:fd:b5:11:
3a:c6:5a:d0:f2:d2:3d:7e:1e:73:6a:69:a2:89:e2:
4e:93:9a:6e:33:e8:49:24:8a:ed:33:0e:de:5f:09:
53:9e:24:e3:3c:a9:ec:1a:b7:17:e7:ce:f4:9e:6c:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:0A:83:53:BA:08:0A:47:CA:1C:74:A0:DE:29:0D:69:FC:A9:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEDEE9229A911F195BA79BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
45.192.115.0/24
45.192.165.0-45.192.166.255
45.192.227.0-45.192.239.255
45.192.244.0/24
45.194.0.0/24
45.194.24.0/24
45.195.133.0/24
45.195.255.0/24
45.198.183.0-45.198.184.255
Signature Algorithm: sha256WithRSAEncryption
ae:d9:4b:0d:1e:17:d3:0e:3b:44:44:7a:bc:9f:20:c9:1a:0f:
1d:6f:97:09:5a:3f:c0:77:6c:c2:21:6a:9e:38:8a:b8:10:ea:
57:b3:38:aa:60:a6:58:97:b5:4a:ab:d6:66:2e:be:42:99:02:
94:df:5e:2d:16:2f:69:53:c3:1c:82:18:6c:07:d9:b9:ad:49:
36:fd:5f:2c:4f:9f:56:20:f6:56:03:b6:de:fb:77:d2:d9:da:
49:ff:c0:1f:60:34:a7:12:c0:6e:2c:bb:66:0d:ce:12:03:29:
85:c0:97:b5:ed:c6:d5:d7:29:86:00:e4:61:94:47:1b:c5:61:
d7:0b:d5:82:43:f6:41:d4:80:1e:b6:71:66:90:ce:ad:0b:4b:
1c:90:95:30:a9:4c:dc:ec:5a:e5:e0:bd:aa:4c:43:d1:ea:b9:
06:08:d2:28:ef:2e:ab:0f:06:4a:90:29:7b:a5:49:36:36:45:
4d:35:f8:07:4d:cd:6b:ce:03:83:8a:eb:c1:29:bb:5b:15:86:
7a:12:1d:b0:9e:5d:c1:3a:a6:3b:1d:73:62:cb:1b:e4:e2:5d:
d7:22:26:46:f7:48:2a:bf:c9:87:23:8e:07:c6:5d:e1:2b:74:
8a:68:37:ea:83:d3:c6:c9:0c:bd:6e:15:12:66:1d:a8:f1:7b:
a9:5a:5d:5e
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIDAaeZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI3MDY1MzMwWhcNMjYwNTEwMDY1MzMwWjAYMRYw
FAYDVQQDEw02OWM2Mjk3MC0wY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAk7kOZMgvB9Y9nx5gSCfUtFZo9kn2cFJbezHi5F5W3BREnizWUwlvp8xL
hqwRACicDILVDSkj8K/YrzfgPk67pSilvHN6efL3Rs3N9ccZrqmUECqtKCJiFxPZ
ExmHeyfsnXNv6zSNhqxMyhxMA9qFLNbMN6Gm7tqSW8lu+HMKA5/3KzFIC3ydDxzo
G5WWzGkpq9NUW6gXBwpKxJieS0ncdmft+d8LIp2/3dyuj+UAXYxNU16E4ApB2uwK
Sj1PrMNeCO4dHaIego8sJ3MXmfb9tRE6xlrQ8tI9fh5zammiieJOk5puM+hJJIrt
Mw7eXwlTniTjPKnsGrcX5870nmxRXQIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFAMp
CoNTuggKR8ocdKDeKQ1p/KkBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQ0VERUU5MjI5QTkxMUYxOTVCQTc5QkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQALcBwAwQALcBzMAwDBAAtwKUD
BAAtwKYwDAMEAC3A4wMEBC3A4AMEAC3A9AMEAC3CAAMEAC3CGAMEAC3DhQMEAC3D
/zAMAwQALca3AwQALca4MA0GCSqGSIb3DQEBCwUAA4IBAQCu2UsNHhfTDjtERHq8
nyDJGg8db5cJWj/Ad2zCIWqeOIq4EOpXsziqYKZYl7VKq9ZmLr5CmQKU314tFi9p
U8McghhsB9m5rUk2/V8sT59WIPZWA7be+3fS2dpJ/8AfYDSnEsBuLLtmDc4SAymF
wJe17cbV1ymGAORhlEcbxWHXC9WCQ/ZB1IAetnFmkM6tC0sckJUwqUzc7Frl4L2q
TEPR6rkGCNIo7y6rDwZKkCl7pUk2NkVNNfgHTc1rzgODiuvBKbtbFYZ6Eh2wnl3B
OqY7HXNiyxvk4l3XIiZG90gqv8mHI44Hxl3hK3SKaDfqg9PGyQy9bhUSZh2o8Xup
Wl1e
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:26 2026 by rpki-client